Homepage
About Snyk

Malicious Package Affecting pyconau-funtimes package, versions [0,]

0.0
critical

Snyk CVSS

    Attack Complexity Low
    Confidentiality High
    Integrity High
    Availability High

    Threat Intelligence

    Exploit Maturity Mature

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-PYTHON-PYCONAUFUNTIMES-72536
  • published 28 Oct 2018
  • disclosed 13 Oct 2018
  • credit Bertus
Report a new vulnerability Found a mistake?

Introduced: 13 Oct 2018

Malicious CVE NOT AVAILABLE CWE-506 Open this link in a new tab

How to fix?

Avoid usage of this package altogether.

Overview

12 Python libraries were identified as malicious packages. pyconau-funtimes opened a reverse shell through a proxy service, so it was not possible to determine the other end of the connection.

On October 13th, 2018 all of these packages have been removed from Pypi.

References